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Why Asset Management? 


Multiple Regulations and Standards 


RBI Cybersecurity 


2.4 Maintain an inventory of Inventory Management of Business 
system components that are in IT Assets, Prevent execution of 
scope for PCI DSS unauthorized S/W 
ISO 
ISO/IEC 27001 
Inventory of assets (clause Full hardware and software 


A.8.1.1) inventory, including license 
information for audit data 


© Qualys. 


Challenges with IT Asset Management 


POINT NO BUSINESS 
VISIBILITY SOLUTIONS CONTEXT 


Qualys Unified IT-loT-OT Visibility, 
Analytics and Control Solutions 


Agentless| Agent | Passive | API 


Introducing 


Qualys Asset Inventory 


Real-time Inventory 


Source of truth for IT and Security 
teams 


Structured and complete context 
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Benefits 


2-second Visibility 


Business contextual Inventory 


Uniform, accurate information 


IT Cost reduction 


How is it done? 
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Physical Scanner Cloud Agent OS/HW/SW EoL/EoS 


Virtual Scanner Passive Sensor Mfg./owner/product License type 
Cloud Scanner API Market version Vulnerability/PC 


Qualys Sensors Asset Inventory in Qualys Cloud 
Scalable, Self-updating & Centrally Managed Categorization, Normalization, Enrichment 


Case Study: Large Bank helps 
Stay Compliant with Qualys AI 


Challenges 
r3 Unauthorized 


Unauthorized Software 
Software 
Database Versions T d 
oe Software Lifecycle a 
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Database Software S 
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Solution 
Al Dashboards | Software Inventory | Lifecycle Context 


Case Study: Large Accounting 
Firm uses Qualys AI for Unified 
Inventory 
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Solution 
Al Dashboards | Asset Category Priority | CMDB Synch. 


Case Study: Global Technology 
Leader uses Qualys AI to G 
Determine Unmanaged Devices ye 
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Solution 


Al Dashboards | Unmgd. Devices View | Traffic Stats 


Toggle 
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Complete and = 
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List and Form 
View 


clean data to r1 
your CMDB Es 
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All Bookmarks 
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Home 


Certified ServiceNow App Syncs 
asset data in both directions. 
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Self-Service 


Qualys App for ServiceNow CMDB 
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Product Catalog 
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Servicenow to Qualys 


Servicenow to Qualys Sync 


Qualys Asset Tag 


Table 


ServiceNow 
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Query Add Filter Condition 


Add "OR" Clause 


All of these conditions must be mei 


IP Address 


Fully qualified domain name 


DEMO 


Qualys sensors for complete, detailed asset telemetry 
Structuring your inventory (normalization and taxonomy) 
Enriching your inventory (e.g. lifecycle) 

Blind spots? (showcase passive discovery) 


Multi-function Passive Sensor 


© 
(Beta Now!) 
First Phase (Q2/Q3-2019) Future use cases 
IT asset discovery and profiling Highlight asset relationship 
Application recognition and usage Traffic anomaly & Network IOC 
Smart whitelisting (policies within 
Asset discovery and profiling 
SCADA 


Medical Devices 


9 Qualys. 


Secure Access Control 


Use Cases 


= Asset Inventory - Access control using asset inventory attributes 
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J Use Cases 


Q Vulnerabilities - Quarantine assets if vulnerable 


Quarantine 


Vulnerability Found 


Remote Data Center RDC-01 
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Use Cases 
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